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DETAILED ACTION 

1 . Claims 1-20 are presented for examination. 

Response to Arguments 

2. Applicant's arguments with respect to claims 1 , 8 and 15 have been 
considered but are moot in view of the new ground(s) of rejection. 

Claim Rejections - 35 USC § 101 

3. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, macliine, manufacture, or 
composition of matter, or any new and useful improvement thereof, may obtain a patent 
therefor, subject to the conditions and requirements of this title. 

4. Claims 15-20 are rejected under 35 U.S.C. 101 because the 
claimed invention is directed to non-statutory subject matter. Examiner notes 
that Applicant's specification fails to disclose explicit examples or provide support 
for a suggestion of the particular forms of media which constitute the claimed "A 
computer readable medium". Thus, Examiner applies the broadest reasonable 
interpretation to the aforementioned claimed "medium" and considers the claims 
to intend to cover both transitory and non-transitory media. As a result, the 
transitory media (i.e. propagating signal for transmission of software) which is not 
patentable subject matter causes the claims to be rejected under 35 USC §101, 
as non-statutory. 

Claim Rejections - 35 USC § 103 

5. The following is a quotation of 35 U.S.C. 1 03(a) which forms the 
basis for all obviousness rejections set forth in this Office action: 
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(a) A patent may not be obtained though the invention is not identically disclosed or deschbed 
as set forth in section 102 of this title, if the differences between the subject matter sought to 
be patented and the phor art are such that the subject matter as a whole would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 
all obviousness rejections set forth in this Office action: (a) A patent may not be 
obtained though the invention is not identically disclosed or described as set forth 
in section 102 of this title, if the differences between the subject matter sought to 
be patented and the prior art are such that the subject matter as a whole would 
have been obvious at the time the invention was made to a person having 
ordinary skill in the art to which said subject matter pertains. Patentability shall 
not be negatived by the manner in which the invention was made. 6. The factual 
inquiries set forth in Graham v. John Deere Co,, 383 U.S. 1,148 USPQ 459 
(1966), that are applied for establishing a background for determining 
obviousness under 35 U.S.C. 103(a) are summarized as follows: 1 . Determining 
the scope and contents of the prior art. 2. Ascertaining the differences between 
the prior art and the claims at issue. 3. Resolving the level of ordinary skill in the 
pertinent art. 4. Considering objective evidence present in the application 
indicating obviousness or nonobviousness. 



6. Claims 1-20 are rejected under 35 U.S.C. § 103 (a) as being 

unpatentable over Win et al. (hereinafter Win) U.S. Patent No. 6,453,353, in view 
of Lai U.S. Patent No. 7,698,398. 



7. As to claim 1, Win teaches the invention as claimed, including a 
method for integrating security and user account data in a reporting system with 
at least one remote repository comprising the steps of: 

enabling a user to submit user credential input to a reporting system 
(figure 1, col. 5, lines 12-20, col. 6, lines 20-40 -receiving user registers/log-in to 
tlie system/central repository/registry repository at a registry server); 
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identifying an autlientication process (figure 1, col. 6, lines 41 -col. 7, line 
6) from a plurality of authentication process comprising a standard-mode 
authentication (fig. 5A, col. 9, lines 41-60), pass-through authentication (col. 6, 
line 10-col. 7, line 6, col. 12, line 10-53 -Registry server using Authentication 
server module to autlienticate user via Registry Repository (i.e., database), and 
anonymous authentication (col. 8, line 5-col. 9, line ^2 -Autlienticate and permit 
user to access to certain source based on user role); 

forwarding the user credential input to a first server (figures 1 , 3, 5, col. 8, 
line 5-col. 10, line 33 -forwarding to access server 106 for authentication); and 

enabling the first server to apply the authentication process to authenticate 
the user against a remote repository using Open Database Connectivity (ODBC) 
{i.e.. Register Repository) for verifying the user credential input (figures 1, 3, 5, 
col. 6, lines 41 -col. 7, line 67 -the access server 106 authenticates/verifies user 
name/password with Registry sever 108 ) and to determine user access control 
data for identifying at least one user privilege for performing one or more actions 
and at least one user permission associated with one or more objects (abstract, 
col. 5, line 66-col. 6, line 17, col. 8, lines 5-23, col. 11, lines 42-64 -providing 
user a personalized menu that displays only resources that user has a right to 
access according to user's profile, including user's role and privileges), wherein 
the remote repository is located within a second server, the second server being 
different from the first server (figure 1, col. 6, lines 20-26 and 41-54 - the registry 
repository 110 at the registry server 108 that stores user information, resources. 
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users' role that can be used by access server 106 to authorize user's privileges 
and wherein the access server 106 and registry server 108 are different). 

However, Win does not explicitly teach wherein the reporting system 
comprises an On-Line Analytical Processing (OLAP) decision support system 
(DSS). 

Lai teaches the reporting system comprises an On-Line Analytical 
Processing (OLAP) decision support system (DSS) (col. 77, line 43-51). 

It would have been obvious to one of ordinary skill in the Data Processing 
art at the time of the invention was made to modify the teachings of Win to 
include OLAP decision support system as disclosed by Lai in order to provide a 
useful structure and guiding principle for scalable and reliable Web services (see 
Lai col. 2, line 7-17). 

8. As to claim 2, Win teaches the invention as claimed, further 
comprising a step of importing user information from the remote repository (figure 
1 , col. 5, lines 1 2-20, col. 6, lines 20-26, col. 7, lines 45-57). 

9. As to claim 3, Win teaches the invention as claimed, wherein the 
authentication process comprises Lightweight Directory Access Protocol (col. 12, 
lines 10-53). 
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10. As to claim 4, Win teaclies tlie invention as claimed, wherein the 
authentication process comprises an operating system authentication (figures 1, 
3, 5, col. 6, lines 41-col. 7, line 67). 

11. As to claim 5, Win teaches the invention as claimed, further 
comprising a step of enabling the server to synchronize user account data with 
the user information from the remote repository (col. 7, lines 34-67, col. 19, line 
50-col. 20, line 53). 

12. As to claim 6, Win teaches wherein the user is associated with a 
group of users wherein group information from the remote repository is imported 
(figure 1, col. 5, lines 12-20, col. 6, lines 20-26, col. 7, lines 45-57). 

13. As to claim 7, Win teaches the invention as claimed, wherein the 
user information comprises at least one or user permissions, privileges and 
access rights associated with the user (abstract, col. 5, line 66-col. 6, line 17, col. 
8, lines 5-23, col. 1 1 , lines 42-64). 

14. As to claim 8, Win teaches the invention as claimed, including a 
system for integrating security and user account data in a reporting system with 
at least one remote repository, comprising: 
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an input for enabling a user to submit user credential input to a reporting 
system (figure 1 , col. 5, lines 12-20, col. 6, lines 20-40 -receiving user 
registers/log-in to tlie system/central repository); 

an identification module for identifying an authentication process (figure 1, 
col. 6, lines 41 -col. 7, line 6) from a plurality of authentication process comprising 
a standard-mode authentication (fig. 5A, col. 9, lines 41-60), pass-through 
authentication (col. 6, line 10-col. 7, line 6, col. 12, line 10-53 -Registry server 
using Autlientication server module to autlienticate user via Registry Repository 
(i.e., database), and anonymous authentication (col. 8, line 5-col. 9, line 12 - 
Autlienticate and permit user to access to certain source based on user role); 

a forwarding module for forwarding the user credential input to a first 
server (figures 1 , 3, 5, col. 8, line 5-col. 10, line 33 -forwarding to access server 
106 for authentication); and 

a first server for applying the authentication process to authenticate the 
user against a remote repository using Open Database Connectivity (ODBC) 
{i.e.. Register Repository) for verifying the user credential input (figures 1, 3, 5, 
col. 6, lines 41 -col. 7, line 67 -the access server 106 authenticates/verifies user 
name/password with Registry sever 108) and to determine user access control 
data for identifying at least one user privilege for performing one or more actions 
and at least one user permission associated with one or more objects (abstract, 
col. 5, line 66-col. 6, line 17, col. 8, lines 5-23, col. 11, lines 42-64 -providing 
user a personalized menu that displays only resources that user has a right to 
access according to user's profile, including user's role and privileges), wherein 
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the remote repository is located witliin a second server, tlie second server being 
different from tlie first server (figure 1, col. 6, lines 20-26 and 41-54 - the registry 
repository 110 at tlie registry server 108 tliat stores user information, resources, 
users' role tliat can be used by access server 106 to autliorize user's privileges 
and wlierein tlie access server 106 and registry server 108 are different). 
However, Win does not explicitly teach wherein the reporting system comprises 
an On-Line Analytical Processing (OLAP) decision support system (DSS). 

Lai teaches the reporting system comprises an On-Line Analytical 
Processing (OLAP) decision support system (DSS) (col. 77, line 43-51). 

It would have been obvious to one of ordinary skill in the Data Processing 
art at the time of the invention was made to modify the teachings of Win to 
include OLAP decision support system as disclosed by Lai in order to provide a 
useful structure and guiding principle for scalable and reliable Web services (see 
Lai col. 2, line 7-17). 

15. As to claim 9, Win teaches the invention as claimed, further 
comprising an import module for importing user information from the remote 
repository (figure 1, col. 5, lines 12-20, col. 6, lines 20-26, col. 7, lines 45-57). 

16. As to claim 10, Win teaches the invention as claimed, wherein the 
authentication process comprises Lightweight Directory Access Protocol (col. 12, 
lines 10-53). 
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1 7. As to claim 1 1 , Win teaclies tlie invention as claimed, wherein the 
authentication process comprises an operating system authentication (figures 1, 
3, 5, col. 6, lines 41-col. 7, line 67). 

18. As to claim 12, Win teaches the invention as claimed, wherein the 
server synchronizes user account data with the user information from the remote 
repository (col. 7, lines 34-67, col. 19, line 50-col. 20, line 53). 

19. As to claim 13, Win teaches wherein the user is associated with a 
group of users wherein group information from the remote repository is imported 
(figure 1, col. 5, lines 12-20, col. 6, lines 20-26, col. 7, lines 45-57). 

20. As to claim 14, Win teaches the invention as claimed, wherein the 
user information comprises at least one or user permissions, privileges and 
access rights associated with the user (abstract, col. 5, line 66-col. 6, line 17, col. 
8, lines 5-23, col. 1 1 , lines 42-64). 

21 . As to claim 15, Win teaches the invention as claimed, including a 
processor-readable medium comprising instructions for execution by a processor 
to integrate security and user account data in a reporting system with at least one 
remote repository, the medium comprising: 
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instructions for causing a processor to enable a user to submit user 
credential input to a reporting system (figure 1, col. 5, lines 12-20, col. 6, lines 
20-40 -receiving user registers/log-in to tlie system/central repository); 

instructions for causing a processor to identify an authentication process 
(figure 1, col. 6, lines 41 -col. 7, line 6) from a plurality of authentication process 
comprising a standard-mode authentication (fig. 5A, col. 9, lines 41-60), pass- 
through authentication (col. 6, line 10-col. 7, line 6, col. 12, line 10-53 -Registry 
server using Autlientication server module to autlienticate user via Registry 
Repository (i.e., database), and anonymous authentication (col. 8, line 5-col. 9, 
line 1 2 -Autlienticate and permit user to access to certain source based on user 
role); 

instructions for causing a processor to forward the user credential input to 
a first server (figures 1, 3, 5, col. 8, line 5-col. 10, line 33 -forwarding to access 
server 106 for authentication); and 

instructions for causing a processor to enable the first server to apply the 
authentication process to authenticate the user against a remote repository using 
Open Database Connectivity (ODBC) {i.e.. Register Repository) for verifying the 
user credential input (figures 1, 3, 5, col. 6, lines 41 -col. 7, line 67 -the access 
server 106 authenticates/verifies user name/password with Registry sever 108) 
and to determine user access control data for identifying at least one user 
privilege for performing one or more actions and at least one user permission 
associated with one or more objects (abstract, col. 5, line 66-col. 6, line 17, col. 
8, lines 5-23, col. 1 1 , lines 42-64 -providing user a personalized menu that 
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displays only resources that user has a right to access according to user's profile, 
including user's role and privileges), wherein tlie remote repository is located 
witliin a second server, tlie second server being different from tlie first server 
(figure 1 , col. 6, lines 20-26 and 41-54 - the registry repository 110 at the registry 
server 108 that stores user information, resources, users' role that can be used 
by access server 106 to authorize user's privileges and wherein the access 
server 106 and registry server 108 are different). 

However, Win does not explicitly teach wherein the reporting system comprises 
an On-Line Analytical Processing (OLAP) decision support system (DSS). 

Lai teaches the reporting system comprises an On-Line Analytical 
Processing (OLAP) decision support system (DSS) (col. 77, line 43-51). 

It would have been obvious to one of ordinary skill in the Data Processing 
art at the time of the invention was made to modify the teachings of Win to 
include OLAP decision support system as disclosed by Lai in order to provide a 
useful structure and guiding principle for scalable and reliable Web services (see 
Lai col. 2, line 7-17). 

22. As to claim 16, Win teaches the invention as claimed, further 
comprising instructions for causing a processor to import user information from 
the remote repository (figure 1, col. 5, lines 12-20, col. 6, lines 20-26, col. 7, lines 
45-57). 
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23. As to claim 17, Win teaclies tlie invention as claimed, wherein the 
authentication process comprises at least one of Lightweight Directory Access 
Protocol and operating system authentication (col. 12, lines 10-53). 

24. As to claim 18, Win teaches the invention as claimed, further 
comprising instructions for causing a processor to enable the server to 
synchronize user account data with the user information from the remote 
repository (col. 7, lines 34-67, col. 19, line 50-col. 20, line 53). 

25. As to claim 19, Win teaches wherein the user is associated with a 
group of users wherein group information from the remote repository is imported 
(figure 1, col. 5, lines 12-20, col. 6, lines 20-26, col. 7, lines 45-57). 

26. As to claim 20, Win teaches the invention as claimed, wherein the 
user information comprises at least one or user permissions, privileges and 
access rights associated with the user (abstract, col. 5, line 66-col. 6, line 17, col. 
8, lines 5-23, col. 1 1 , lines 42-64). 

Conclusion 

27. The prior art made of record and not relied upon is considered 
pertinent to applicant's disclosure (see PTO-892 attached). 

28. Any inquiry concerning this communication or earlier 
communications from the examiner should be directed to Thu Ha Nguyen, whose 



Application/Control Number: 09/883,300 Page 13 

Art Unit: 2453 

telephone number is (703) 305-7447. Tlie examiner can normally be reached 
Monday through Friday from 8:00 AM to 6:00 PM. 

29. If attempts to reach the examiner by telephone are unsuccessful, 
the examiner's supervisor, Joseph Thomas, can be reached at (571) 272-6776. 

Any inquiry of a general nature of relating to the status of this application 
should be directed to the Group receptionist whose telephone number is (703) 
305-9600. 

The fax phone numbers for the organization where this application or 
proceeding is assigned are 703-872-9306 for regular communications. 

Information regarding the status of an application may be obtained from 
the Patent Application Information Retrieval (PAIR) system. Status information 
for published applications may be obtained from either Private PAIR or Public 
PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair- 
direct.uspto.gov . Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll- 
free). 



/THUHAT. NGUYEN/ 
Primary Examiner, Art Unit 2453 
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